Modern home networks often require coverage expansion, and router users Keenetic are faced with choosing the optimal operating mode for the second device. One of the most powerful tools in the arsenal of these routers is the mode WISP (Wireless Internet Service Provider), which is often confused with standard access point mode. Unlike a simple repeater, this protocol allows for the creation of a full-fledged subnet, delivering traffic and a stable connection even across complex wireless bridges.
Understanding what it is WISP on Keenetic, opens up new opportunities for equipment owners to build a flexible network infrastructure without laying unnecessary cables. This technology is especially relevant in apartment buildings, where the provider limits the number of connected devices, or in private homes, where it is necessary to connect two buildings via radio. Let's take a detailed look at the architecture of this solution, its advantages, and the step-by-step setup process.
The key feature is that in this mode, the router receives Wi-Fi from the main device and then distributes it further, creating its own local network with NAT. This means that devices connected to the WISP client will be on a different subnet than devices connected to the main router. For many use cases, this is a key factor in security and stability, allowing guest or smart home traffic to be isolated from the main network.
Architecture and operating principles of WISPs in the Keenetic ecosystem
Technology WISP based on the operating system KeeneticOS Implements the functionality of a wireless client with routing. When you switch the router to this mode, its WAN interface becomes a wireless connection. The device scans the air, finds an available network (from the ISP or the main router), logs in, and receives an IP address, just like a regular client (laptop or smartphone). However, unlike a regular client, it doesn't simply consume traffic; it broadcasts it to its LAN ports and its own Wi-Fi network.
The most important element of architecture is the presence NAT (Network Address Translation). Since the second router creates its own subnet, it hides the internal addresses of its clients from the main network. This provides an additional layer of security: devices on the main network cannot see devices on the WISP client's network by default. This isolation is useful if you want to create a separate segment for IoT devices or guests, without trusting them with access to primary file storage or printers.
⚠️ Note: When using WISP mode, you get "double NAT." This can cause problems with some online games, port forwarding, or torrent trackers. If port forwarding is critical to you, consider alternative setup scenarios.
Besides, Keenetic In WISP mode, it supports various Wi-Fi connection types, including PPPoE, L2TP, and PPTP, if required by the provider. The router can automatically log in via a web form (Captive Portal), a feature often found in public hotel or hostel networks. Flexible configuration allows the device to be adapted to virtually any signal conditions.
Key differences between WISP and Access Point (AP) mode
Many users mistakenly believe that Access Point and WISP modes are the same thing, as both options involve accessing the internet over the air. However, the difference in operating logic is colossal. AP The router acts merely as a cable "extender," expanding the existing network. All devices connected to the AP receive IP addresses from the main router and are on the same plane (broadcast domain). In WISP mode, the router creates a new, independent network with its own rules.
Let's look at the main differences in a table for clarity:
| Characteristic | Access Point (AP/Repeater) Mode | WISP Mode (Client) |
|---|---|---|
| Network type | Single flat network (one subnet) | Two separate networks (double NAT) |
| IP addressing | The IP is issued by the main router | The WISP router provides IP to its clients |
| Device visibility | All devices see each other | Devices are isolated (without route configuration) |
| Speed | Losses are minimal (depending on the standard) | Losses may occur due to NAT processing and encryption |
The choice between these modes depends on your goals. If you need a printer connected to the main router to be accessible from a laptop connected to a second device, you need the [Printer] mode. AP or a repeater. If your goal is to create an isolated circuit, for example, for renting out an apartment or for testing equipment, then WISP would be an ideal choice. A WISP is also often used when the main router can't handle the number of connected clients, and part of the load needs to be shifted to a second device.
Step-by-step instructions for setting up a WISP on Keenetic
Setting up wireless client mode on devices Keenetic This is done through the modern KeeneticOS web interface. The process is fairly straightforward, but requires careful consideration when selecting security settings. Before you begin, make sure you know the network name (SSID) and password for the Wi-Fi you plan to connect to.
First, you need to access your router settings. In the web configurator, go to the menu Internet -> Wireless (or Wi-Fi Client (in older versions). Here you will see a list of available wireless networks. Click the button Connect or Add connectionIf the desired network is not listed, use the refresh scan button or enter the SSID manually.
☑️ Checklist before setting up a WISP
After selecting the network, the connection settings window will open. It's crucial to select the correct security type here. In the field Protection Select the same standard as the main router (usually WPA2-PSK or WPA3). Enter the password. Pay special attention to the "Use as default gateway" field—it must be enabled so that traffic from the WISP router's clients goes through this tunnel.
Next, you need to configure the local network of the client router itself. Go to the menu Home network -> IP parameters. Make sure that the IP address of this router does not match the address of the main router. For example, if the main router has the address 192.168.1.1, then it is better for the WISP client to assign 192.168.2.1If the subnets match, a conflict will occur and the Internet will not work. The system KeeneticOS It often offers to change the address automatically if it detects a conflict, but a manual check won't hurt.
⚠️ Note: Interfaces and menu names may vary slightly depending on the KeeneticOS firmware version installed. Always consult the official documentation for your specific model if you cannot find the menu item you need.
Features of working with dual-band routers
Owners of modern models Keenetic (Giga, Ultra, Skipper, Voyager series) have a significant advantage due to their simultaneous support of the 2.4 GHz and 5 GHz bands. When setting up a WISP, it is highly recommended to use the 2.4 GHz band. 5 GHz To establish a backbone communication channel between routers. This range is less noisy and provides higher throughput, which is critical, since all traffic from the second network will pass through this channel.
There's a strategy for minimizing speed drops. You can set up a connection to the main network on 5 GHz, while distributing internet to clients on 2.4 GHz (or vice versa, depending on reception conditions). However, if both routers are dual-band, the ideal setup would be to use 5 GHz for router-to-router communication and 5 GHz (on a different frequency) or 2.4 GHz for clients.
Technical nuances of MIMO and channel width
When setting up a WISP manually, you can set the channel width. For 5 GHz, 40 or 80 MHz is recommended for maximum speed, but in densely populated areas (with many neighboring networks), 20 or 40 MHz is better for stability. For 2.4 GHz, always use 20 MHz.
Also worth mentioning is the feature Mesh (Keenetic Mesh), which in the latest firmware versions partially replaces the classic WISP. In Mesh mode, routers are combined into a single seamless network, maintaining a single subnet (like APs) but using the smart routing algorithms typical of WISPs. If your devices support Mesh and you don't need network isolation, it's best to use this mode for better performance.
Solving typical problems and diagnosing connections
Despite the reliability of the equipment KeeneticWhen setting up complex wireless bridges, problems can arise. One of the most common is a lack of internet access for clients connected to a WISP router, even though the connection status is green. First, check your DNS settings. Try setting static DNS servers, such as Google's, in the WISP router's WAN interface settings (8.8.8.8) or Cloudflare (1.1.1.1). Often the main router does not correctly transmit DNS requests through the wireless bridge.
Another common problem is low speed. Since a WISP uses a half-duplex radio channel, the actual speed will always be lower than with a wired connection. Furthermore, the overhead of encryption and NAT also reduces performance. If the speed is critically low, check the signal strength. Unlike AP mode, where signal strength is simply important, for a WISP, channel stability is crucial. Use the built-in Wi-Fi setup wizard in the menu. Wi-Fi network -> Setup Wizard to select the least loaded channel.
If the connection is constantly dropping, check the power saving settings on the main router or whether MAC address filtering is enabled. The main router may be blocking unknown devices. Find the MAC address of the WISP router's WAN interface (indicated on the label or in the connection status) and add it to the main device's whitelist. Also, make sure the main router doesn't have a limit on the number of connected clients that has already been reached.
Usage scenarios and advanced settings
WISP mode on Keenetic This mode has found wide application not only in everyday life but also in small businesses. For example, in hotels or hostels, where the provider provides one cable and one access point, but guests need to be separated into rooms. Each guest receives their own isolated network segment, preventing access to each other's data. This mode is also ideal for temporary offices or construction sites where it is not possible to install cables but a full-fledged local network with file sharing and a printer is needed.
Advanced users can configure static routes. If you still need devices on the main network to see devices on the WISP network (for example, to access CCTV cameras), you can set up a static route on the main router, specifying the WISP client's IP address as the gateway. However, this requires manual configuration and an understanding of IP routing principles.
Another interesting scenario is a backup channel. You can configure your WISP connection as a backup. In normal mode, the router operates as the main gateway, but if the cable breaks, it automatically switches to Wi-Fi from a neighboring router or mobile hotspot. To do this, go to the connection priority settings (Internet -> Connection priorities) it is necessary to establish appropriate rules.
Is it possible to use a WISP to connect to paid hotspots with web form authentication?
Yes, Keenetic Supports authorization via a Captive Portal. Any client behind a WISP router will display an authorization window when attempting to connect. However, to ensure full network functionality (so that all devices have internet access without having to re-authorize each device), it's best to authorize once using the router's WAN interface MAC address. To do this, temporarily connect a computer to the router, clone its MAC address to the WAN port, authorize, and then return the original MAC address or keep the cloned one.
Will my internet speed drop in WISP mode?
Yes, speed loss is inevitable. The wireless channel operates in half-duplex mode (reception and transmission alternate), and some of the router's processor resources are devoted to NAT processing and encryption. Under ideal conditions, losses will amount to 20-30% of the main channel's speed. In the presence of interference or when using the 2.4 GHz band, losses can be significantly higher.
Is WISP mode compatible with IPTV?
In standard WISP mode with NAT enabled, it is difficult to broadcast IPTV multicast traffic. However, Keenetic has mechanisms for forwarding IGMP queries. You will need to configure the IGMP Proxy in the section Network rules -> IGMP Proxy, enabling it for both the Wi-Fi client interface and the home network interface. This will allow you to stream TV to devices behind the second router.
How to disable WISP mode and return to normal operation?
To do this, simply go to the router's web interface and go to the menu Internet -> Wireless (or Wi-Fi Client) and press the button Disable or Remove connectionAfter this, the router will stop attempting to connect to the external network as a client. If you want to completely reset the settings, use the button SBS (reset) on the device body or the factory reset function in the menu System.